How to backup active directory

[jeremy mendoza]

Guys,

How do i backup active directory because i'm going to upgrade my server's hard drive! Meaning I'm going to install also a fresh copy of win2k3 standard.. Another thing is this is my global catalog, domain controller, dns and my exchange 2k3. What do i need to know before doing this drastic action. :)


Thanks,

JM

[Ronald Postma]

Hi JM,
If you want to be able to set the AD back you need to make a full system backup with your backup software, If you backup the system state the complete AD and forest scemaa will be backed up.

Futher I hope for you that you do this regulary, if you do not and you have an critical hardware error and you have to restore on a new server you have a serious problem.

If you make a fresh installation of you windows server install all the software (like exchange) on it that you and put the system state back and the other files that are saved on yhe server you will have the same server as before. (you may have to put the system state back before installing exchange)

Have a nice day,
HTH, Ronald

[Pieter 't Hart]

dear jeremy,
another way is to
- demote this domain-controller (dcpromo)(I assume you have another domaincontroller ?)
- remove this computer from the domain
- replace the disk
- reinstall a new copy of windows on the new disk including servicepacks/security updates.
- promote this server to domain controller (dcpromo again). this can be done during installation or afterwards. I would suggest afterwards after applying all updates.

Pieter

[jeremy mendoza]

Pieter,
Thanks Man for the reply.. But I don't have a backup server(Scary! :(} If i setup a temporary server would that be ok?? And another thing would there be any problem if the backipped active directory would be loaded to the new installed win2k3 server?

Thanks

JM

[Ronald Postma]

JM,
You can make an aditional DC it will replicate the complete DC to it's harddrive. Problem is that it is not the first installed server in the forrest so do not forget to make this server Global catalog server. Deploy all the netweork roles your original server has to the temp server, this also has the benefit your network stays online.
It may also be an idea to keep the temp server in your network as a redundant solution.

Have a nice day,
HTH, Ronald

[Pieter 't Hart]

jeremy,
yes you can use a temporary server.
as ronald say, when making it a domain controller, active directory is automatically replicated.
this is the easiest way to have a backup of your active directory.
ronalds statement about the global catalog is important to keep in mind.
but when removing the old server as dc and from domain you will be asked if it's roles should be transfered to another server.
depending on the number of users (and other use of active directory like exchange-server) i would follow ronalds advice to promote the temporary server to a permanent status.
I do think the result of this procedure is more predictable than sole backup and restore of active directory.
If you do want to use backup-restore i'd suggest a full restore to a new disk (including system state).
Pieter

[Ronald Postma]

Hi again,
If you want to do this with the second DC, what is a good choice, also make sure you have a good backup. If something goes wrong you can go back,

Regards, Ronald

[Scott Schering_1]

Everyone is right on about how to go about doing the backup..

Another option would be to use GHOST.

Make an image of the HD

install the new larger drive and re-image it back onto the server

I'd still make a full backup with system state to be safe.

Also..

If your DNS is not AD integrated a System State alone will not backup DNS

Having Exchange in the mix make it even more difficult.

You will also have to do an Exchange full backup of all the stores.

If you go the rebuild route you will have to re-install exchange with the disaster recovery mode switch then restore all the stores.

No I'll throw in the Exchange on A DC is not the most stable configuration.

If you have the hardware I'd move Exchange off the DC but thats another subject.

So bottom line..

for a rebuild senario.. with a temp backup server

Build a new server
DCpromo it
move the FISMO roles to the new box
AD integrate DNS is it isn't
double check that all DNS zones are setup on the new server
WINS???
If so set it up and replicate with the existing server

add the new DNS and WINS server to all other servers , NON DHCP workstations and the DHCP scopes

You do have an option of setting up a backup exchange server and migrating all your exchange users to that while you do the rebuild.

So now that you have all the backup systems in place make a Full backup of the Drives, systems state and Exchange.

DC promo the server to a member server

remove the old drive
install the new one and rebuild the OS.
DC promo to a DC
Install DNS
Install WINS (if you have it)
Install Exchange in DR mode
restore the exchange stores
Grab the FISMO roles back from the temp DC

I'm sure I forgot a few dozen steps


Now lets think from another angle.

I can only asssume you are upgrading the drive to gain space.
Can you install the new drive as a new volume? move the exchange stores, logs, over to the new volume..

that should free up lots of space on the original drive.